Re: [openpgp] I-D Action: draft-ietf-openpgp-crypto-refresh-06.txt

[Paul Wouters <[e-mail]>]

On Mon, 6 Jun 2022, [e-mail] wrote:

> Subject: [openpgp] I-D Action: draft-ietf-openpgp-crypto-refresh-06.txt

> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-openpgp-crypto-refresh-06

A list of changes, excluding non-substantive changes, for this diff are
listed below.

Paul


- bump to draft version -06
- update authors
- Offer simple approach for v5 fingerprints on smartcards
- Introduce Packet Criticality based on Packet Tags
- Offer simple explanation for v5 fingerprints and smartcards
- Recommend generating Intended Recipient Fingerprint
- Add note that it is okay to knowingly ignore packets.
- Clarify that unknown here means unknown packet type.
- Partition the Packet Tag space into critical and non-critical.
- Document "strict" packet type grammars
- Guidance on selecting self-signatures
- IANA directions about registering a new ECC curve
- Describe the necessary steps to register a new elliptic curve in OpenPGP
- Fix typo in Ed448 signature format
- Signature Notation Data Subpacket IANA registry fixes
- Fix ECDH parameters for v5 keys, recommend them for v4 keys.
- Update Security Considerations section
- Editorial changes to transferable key structures
- Document v4 revocation certificates
- Stronger recommendations for PKCS#1 parsing, minor editorial changes
- Clarify that textual data is encoded in UTF-8.
- Drop line about usability studies.
- Added note about this work being done in a separate document
- Add security considerations about fingerprint usability
- Clarify that User IDs and User Attributes may be intermixed
- Specify that certification revocation signatures should come first
- Don't refer to "revocation self signatures" in grammar
- Tweak TSK description to allow for missing secret key material.
- Deprecate DSA
- Deprecate Elgamal
- Deprecate RSA
- Align the Signature Notation Data Subpacket Notation Flag registry.
- Give guidance on when to emit or omit the CRC24 footer.
- Merge section "key structures" into "transferable public keys".
- clean up SHA1 collision detection pointers
- Refer to SHA1CD section in the hash algorithms table
- Clarify Detached Signatures: multiple sigs in one detached object
- Rename "Issuer" subpacket to "Issuer Key ID" subpacket
- Adjust RSA keysize recommendations.
- Stronger limits for RSA keys
- emit a deprecation warning for deprecated ciphersuites as well
- A detached signature may contain more than one signature packet
- Move all key-related sections to "Key Material Packet".
- Move section on Key IDs and Fingerprints.
- Rework subkey advice.
- Swap v3 and v5 key structure sections around, align introductions.
- Mark the draft as IETF, rather than IRTF, IAB, or independent
- Armor and CSF cleanup
- Require selecting the most recent valid self-signature
- Add zero MPI as example.
- ignore signatures with mismatched internal versioning
- Avoid incorrect secret key S2K parameter field count.
- Add V5 key structure
  Subkey version MUST match primary key version.
- Clarify what is stored as an EdDSA secret key
- guidance about userIDs, self-sigs, and key versions
- Clean up test vectors, add sample v5 cert and key
- If signature's hash (+salt) don't match the header, invalidate sig.
- Clarify how to specify multiple hash algorithms in armor headers.
- Reverse guidance on unknown header keys.
- Implementations should gracefully recover from malformed headers.
- Remove the multi-part message framework.
- Mandate ignoring malformed or unknown signatures
- Fix cardinality of user-ids in V5 structure diagram
- Add key structure of revoked V5 primary key
- Add more justification for signature salts
- Move an ECC Security Considerations bullet to its own subsection
- Guidance about when to look for (or not look for) a UID self-sig
- Clarify that a self-sig over a User ID is not required for v5 keys.
- document existing convention about v4 certificates
- Test Vectors: add v5 certificate and secret key
- Test vectors: set off AEAD test vectors as sourcecode objects
- Test vectors: OCB and GCM descriptions had copy-pasted AEAD algo identifiers
- Test vectors: add ASCII-armored forms of sample v4 Ed25519 key and signature
- Test vectors: clarify that the sample EdDSA key and signature use Ed25519
- Test vector: clarify that the sample signature time is in UTC
- Fix sample ed25519 signature
- Clarify descriptions of Argon2 test vectors, annotate as sourcecode
- update acknowledgements section.